Technical Information
- %TEMP%\d894.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d894.tmp' --ping<Full path to file> 65505B98B321B934D9EACCE747AD01A7F9F3E846F0DBE33EC01BDF8D0A7FC47F746D760574CB598FC6D02037298A1ACB1065283F80044F590D7E61E3524F2AD7
- '%TEMP%\d894.tmp' --ping<Full path to file> 65505B98B321B934D9EACCE747AD01A7F9F3E846F0DBE33EC01BDF8D0A7FC47F746D760574CB598FC6D02037298A1ACB1065283F80044F590D7E61E3524F2AD7' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"